Project

General

Profile

Bug #16789 ยป bug_4658_v2.diff

Administrator Admin, 2006-12-14 23:25

View differences:

t3lib/config_default.php (Arbeitskopie)
'lockSSL' => 0, // Int. 0,1,2,3: If set (1+2+3), the backend can only be operated from an ssl-encrypted connection (https). Set to 2 you will be redirected to the https admin-url supposed to be the http-url, but with https scheme instead. If set to 3, only the login is forced to SSL, then the user switches back to non-SSL-mode
'enabledBeUserIPLock' => 1, // Boolean. If set, the User/Group TSconfig option 'option.lockToIP' is enabled.
'loginSecurityLevel' => '', // String. Keywords that determines the security level of login to the backend. "normal" means the password from the login form is sent in clear-text, "challenged" means the password is not sent but hashed with some other values, "superchallenged" (default) means the password is first hashed before being hashed with the challenge values again (means the password is stored as a hashed string in the database also). DO NOT CHANGE this value manually; without an alternative authentication service it will only prevent logins in TYPO3 since the "superchallenged" method is hardcoded in the default authentication system.
'adminOnly' => 0, // Int. If set (>=1), the only "admin" users can log in to the backend. If "<=-1" then the backend is totally shut down! For maintenance purposes.
'adminOnly' => 0, // Int. -1,0,1,2: If set to "1", only "admin" users can log into the backend. If "2" then nobody (not even admins) can log into the backend. If "-1" then the backend including the whole Install Tool is totally shut down! For maintenance purposes.
'disable_exec_function' => 0, // Boolean. Don't use exec() function (except for ImageMagick which is disabled by [GFX][im]=0). If set, all fileoperations are done by the default PHP-functions. This is nescessary under Windows! On Unix the system commands by exec() can be used, unless this is disabled.
'usePHPFileFunctions' => 1, // Boolean. If set, all fileoperations are done by the default PHP-functions. Default on Unix is using the system commands by exec(). You need to set this flag under safe_mode.
'compressionLevel' => 0, // Determines output compression of BE output. Makes output smaller but slows down the page generation depending on the compression level. Requires zlib in your PHP4 installation. Range 1-9, where 1 is least compression (approx. 50%) and 9 is greatest compression (approx 33%). 'true' as value will set the compression based on the system load (works with Linux, FreeBSD). Suggested value is 3. For more info, see class in t3lib/class.gzip_encode.php written by Sandy McArthur, Jr. <Leknor@Leknor.com>
......
$GLOBALS['TYPO3_CONF_VARS']['GFX']['im_negate_mask']=$GLOBALS['TYPO3_CONF_VARS']['GFX']['im_negate_mask']?0:1;
}
if ($GLOBALS['TYPO3_CONF_VARS']['BE']['adminOnly']) {
$GLOBALS['TYPO3_CONF_VARS']['BE']['adminOnly'] = intval($GLOBALS['TYPO3_CONF_VARS']['BE']['adminOnly']);
}
// simple debug function which prints output immediately
function xdebug($var='',$br=0) {
// If you wish to use the debug()-function, and it does not output something, please edit the IP mask in TYPO3_CONF_VARS
t3lib/class.t3lib_beuserauth.php (Arbeitskopie)
} else { // ...and if that's the case, call these functions
$this->fetchGroupData(); // The groups are fetched and ready for permission checking in this initialization. Tables.php must be read before this because stuff like the modules has impact in this
if ($this->checkLockToIP()) {
if (!$GLOBALS['TYPO3_CONF_VARS']['BE']['adminOnly'] || $this->isAdmin()) {
if ($GLOBALS['TYPO3_CONF_VARS']['BE']['adminOnly']==0 || ($TYPO3_CONF_VARS['BE']['adminOnly']==1 && $this->isAdmin())) {
$this->backendSetUC(); // Setting the UC array. It's needed with fetchGroupData first, due to default/overriding of values.
$this->emailAtLogin(); // email at login - if option set.
} else {
t3lib/class.t3lib_tsfebeuserauth.php (Arbeitskopie)
// **********************
// Check Hardcoded lock on BE:
// **********************
if ($TYPO3_CONF_VARS['BE']['adminOnly'] < 0) {
if ($TYPO3_CONF_VARS['BE']['adminOnly']<0) {
return FALSE;
}
......
}
// Finally a check from t3lib_beuserauth::backendCheckLogin()
if (!$TYPO3_CONF_VARS['BE']['adminOnly'] || $this->isAdmin()) {
if ($TYPO3_CONF_VARS['BE']['adminOnly']==0 || ($TYPO3_CONF_VARS['BE']['adminOnly']==1 && $this->isAdmin())) {
return TRUE;
} else return FALSE;
}
    (1-1/1)